
$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/628C9174B6E011EF87D3F60CC4F9AE02.roa
File: 628C9174B6E011EF87D3F60CC4F9AE02.roa (raw, json)
Hash identifier: DaoSAYQzNYlo5aTx4tWzNSKO65Q1HEqqGcmdWjX5IjY=
Subject key identifier: 63:E2:C7:BA:9F:DE:AC:16:9C:60:E0:F4:54:FF:50:D3:87:EA:07:84
Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197
Certificate serial: 0177
Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/628C9174B6E011EF87D3F60CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:07:25 +0000
ROA not before: Tue 05 Aug 2025 05:44:42 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 31898
IP address blocks: 103.15.179.0/24 maxlen: 24
103.159.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl
rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197
Validity
Not Before: Aug 5 05:44:42 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a58b8d-7dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:c8:0e:ff:13:c2:c1:b1:34:a3:05:4b:6a:
42:e8:96:af:80:37:45:d8:4c:8d:19:bb:63:52:f8:
1b:ec:f9:40:74:40:e4:df:52:0b:1a:d8:04:d2:ff:
00:b5:5a:7e:8a:ea:2c:cc:09:16:06:27:d7:aa:42:
22:4d:df:7c:10:0e:a5:35:bc:cb:9d:e7:88:4e:93:
aa:76:b9:1f:a2:50:36:85:a0:72:a6:8f:4f:df:88:
f2:07:a2:94:25:ac:70:b6:8e:78:46:9b:93:2a:9f:
a8:ad:97:bd:a3:ce:9e:b5:83:d1:9d:0c:90:42:35:
22:ec:ab:f2:a0:30:b7:a8:9f:c7:91:02:a5:67:15:
96:a0:e2:27:cc:b3:c7:14:28:8c:87:2b:5b:f6:c8:
3b:9e:14:76:ca:1c:1f:2d:0d:b1:69:58:2b:80:3d:
53:9e:b8:a2:c3:65:c2:d1:59:68:2b:06:7e:3f:17:
7d:c0:37:3f:bd:ed:f2:e1:3e:26:67:22:15:01:23:
91:fc:0a:a6:66:65:c1:66:ec:fe:e1:aa:a5:23:de:
7f:35:57:da:d5:df:f2:1e:32:7b:9e:77:d6:65:6c:
1c:9a:85:ab:56:83:d0:75:d4:5d:d6:b2:d3:5b:33:
06:11:38:a7:08:40:bc:6f:39:15:58:1b:1d:b8:5c:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E2:C7:BA:9F:DE:AC:16:9C:60:E0:F4:54:FF:50:D3:87:EA:07:84
X509v3 Authority Key Identifier:
keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/628C9174B6E011EF87D3F60CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.179.0/24
103.159.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b5:e8:20:1b:ed:08:b4:e7:92:8b:ce:6c:8d:97:e6:20:00:
2f:38:44:6c:78:64:ea:0c:e3:7f:b1:2b:f4:bd:18:40:2c:d4:
d9:b6:29:b5:83:c1:03:ef:0a:ab:17:02:79:53:70:97:ed:05:
c3:75:c5:47:de:2d:a8:84:73:6a:97:30:83:2f:0c:e5:67:ec:
16:62:55:82:59:eb:d8:60:a1:ff:43:e7:e4:2b:30:b1:52:ec:
7f:1d:26:24:c0:b3:da:fb:42:55:87:73:28:bf:2e:0d:a4:40:
e0:f4:4a:81:22:f4:89:84:cc:f4:57:8c:8a:f0:ce:01:c9:cd:
10:bb:4b:46:9e:0c:bd:b7:21:9a:52:6e:ea:15:0e:01:84:32:
f0:a4:31:a3:48:11:10:72:40:85:76:cf:b3:ab:4b:6f:c9:7d:
3a:5a:f8:fa:b4:a7:56:3c:89:e7:aa:17:cf:e6:e1:b5:9e:24:
5c:3a:84:d0:c7:db:b7:20:0a:0e:c2:1d:5d:d4:90:d6:d6:d9:
f3:6d:4b:a8:8a:73:e5:b6:31:f0:09:96:49:21:54:be:fb:05:
c9:bb:ed:e7:40:64:18:e4:c4:62:9a:c2:7d:00:cc:a2:b7:f5:
2e:fc:34:04:5c:98:52:c8:92:ff:83:ca:fd:09:af:e0:d0:a7:
68:b1:0a:45
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0
QkZBNzUxOTcwHhcNMjUwODA1MDU0NDQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OGI4ZC03ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4LIDv8TwsGxNKMFS2pC6JavgDdF2EyNGbtjUvgb7PlAdEDk31ILGtgE0v8A
tVp+iuoszAkWBifXqkIiTd98EA6lNbzLneeITpOqdrkfolA2haBypo9P34jyB6KU
Jaxwto54RpuTKp+orZe9o86etYPRnQyQQjUi7KvyoDC3qJ/HkQKlZxWWoOInzLPH
FCiMhytb9sg7nhR2yhwfLQ2xaVgrgD1Tnriiw2XC0VloKwZ+Pxd9wDc/ve3y4T4m
ZyIVASOR/AqmZmXBZuz+4aqlI95/NVfa1d/yHjJ7nnfWZWwcmoWrVoPQddRd1rLT
WzMGETinCEC8bzkVWBsduFzMTQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGPix7qf
3qwWnGDg9FT/UNOH6geEMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1
QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg0QUMvNkQwMjZDRUNGNUExMTFFRTk4REJDRDExQzRGOUFFMDIvNjI4QzkxNzRC
NkUwMTFFRjg3RDNGNjBDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZw+zAwQAZ59MMA0GCSqGSIb3DQEBCwUAA4IBAQB+teggG+0ItOeS
i85sjZfmIAAvOERseGTqDON/sSv0vRhALNTZtim1g8ED7wqrFwJ5U3CX7QXDdcVH
3i2ohHNqlzCDLwzlZ+wWYlWCWevYYKH/Q+fkKzCxUux/HSYkwLPa+0JVh3Movy4N
pEDg9EqBIvSJhMz0V4yK8M4Byc0Qu0tGngy9tyGaUm7qFQ4BhDLwpDGjSBEQckCF
ds+zq0tvyX06Wvj6tKdWPInnqhfP5uG1niRcOoTQx9u3IAoOwh1d1JDW1tnzbUuo
inPltjHwCZZJIVS++wXJu+3nQGQY5MRimsJ9AMyit/Uu/DQEXJhSyJL/g8r9Ca/g
0KdosQpF
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:43 2026 by rpki-client